3 results (0.003 seconds)

CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-38351

https://notcve.org/view.php?id=CVE-2023-38351

19 Sep 2023 — MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code execution through a man in the middle attack. MiniTool Partition Wizard 12.8 contiene un mecanismo de instalación inseguro que permite a los atacantes lograr la ejecución remota de código a través de un ataque de intermediario. • https://0dr3f.github.io/cve • CWE-295: Improper Certificate Validation •

CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-38352

https://notcve.org/view.php?id=CVE-2023-38352

19 Sep 2023 — MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execution through a man in the middle attack. MiniTool Partition Wizard 12.8 contiene un mecanismo de actualización inseguro que permite a los atacantes lograr la ejecución remota de código a través de un ataque de intermediario. • https://0dr3f.github.io/cve • CWE-295: Improper Certificate Validation •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-29320

https://notcve.org/view.php?id=CVE-2022-29320

20 May 2022 — MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. MiniTool Partition Wizard versión v12.0, contiene una ruta de servicio no citada que permite a atacantes escalar privilegios al nivel del sistema • https://www.exploit-db.com/exploits/50859 • CWE-428: Unquoted Search Path or Element •